Peter N. M. Hansteen, The Book of PF, 2nd Edition, No Starch Press November 2010, also The Book of PF (1st Ed), No Starch Press December 2007

My online PF tutorial, several formats

Slides for this talk at

OpenBSDs web


PF User Guide

Daniel Hartmeier's PF pages,

Daniel Hartmeier: Design and Performance of the OpenBSD Stateful Packet Filter (pf), (presented at Usenix 2002)

Randal L. Schwartz: Monitoring Net Traffic with OpenBSD's Packet Filter, Brandvägg med OpenBSD,

Randal L. Schwartz: Blog for Thu, Jan 29, 2004,

RFC 1631, "The IP Network Address Translator (NAT)", May 1994

RFC 1918, "Address Allocation for Private Internets", February 1996

The FreeBSD PF home page,

Marcus Ranum: The Six Dumbest Ideas in Computer Security, September 1, 2005

Kjell Jørgen Hole WiFi courseware,, also see; also The Unofficial 802.11 Security Web Page comes higly recommended.

Evan Harris: The Next Step in the Spam Control War: Greylisting (the original greylisting paper)

Mark Uemura: What's New in 4.3: authpf-noip

Henning Brauer: Carp and STP meet switch security

Henning Brauer: 10 years of pf

Henning Brauer: Puffy At Work: Code Right And Secure, The OpenBSD Way

Michael W. Lucas: Network Flow Analysis, No Starch Press 2010